$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba5981d4-afd6-4470-aa62-ba6b2d148fcd.roa File: ba5981d4-afd6-4470-aa62-ba6b2d148fcd.roa (raw, json) Hash identifier: Wb4q9SIC/w+VuppAl40//axNDwKvfkD+kQcVhm4JoBQ= Subject key identifier: 0B:2D:36:F4:B2:F4:D3:27:D6:FC:6B:21:01:9A:8A:70:EF:09:5C:50 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 624A339A1BE1AD6ADD52F26D2A19582C3F321F3E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba5981d4-afd6-4470-aa62-ba6b2d148fcd.roa Signing time: Tue 22 Apr 2025 15:50:18 +0000 ROA not before: Tue 22 Apr 2025 15:50:18 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1fff:6000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:4a:33:9a:1b:e1:ad:6a:dd:52:f2:6d:2a:19:58:2c:3f:32:1f:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 22 15:50:18 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=591cca161ea4f002a0b84b91a3fb86228010638e1db6944291b5419dce7e2ea2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:66:eb:6b:66:10:c8:9f:6e:ad:94:c5:36:0c: 3b:13:ff:72:c9:b5:fe:0c:b5:dd:12:46:63:66:17: 4f:34:34:de:f6:7d:8a:76:b5:b0:77:8e:a3:d0:d4: dd:74:aa:16:b0:e9:c5:c4:48:c6:1f:5e:fd:a0:fa: ab:ae:c4:c0:48:c1:6c:b0:19:69:11:99:b0:cf:4e: f4:c3:ce:aa:dc:dd:8d:56:d9:21:a4:88:59:21:96: 5c:f9:26:9a:c4:82:a1:ce:51:6c:38:08:9f:fe:dc: a4:0c:fc:b6:25:93:73:85:2f:f4:80:da:db:3b:c6: 2e:48:1f:ad:cf:51:77:f2:52:ef:2f:18:1a:be:d7: 2c:f5:ad:10:6a:cc:2f:db:4d:ed:32:a6:62:80:7d: 5d:f0:77:6c:b2:8a:cc:8d:5b:32:1f:51:1d:ae:05: 9a:0a:0c:b1:0d:ae:a7:1e:03:eb:38:d7:b8:ae:b0: 8d:b3:77:c6:b7:29:10:f5:05:16:5c:ad:7a:f7:92: c5:ae:f7:5c:3c:1a:d0:8a:1b:26:50:b7:f1:1f:7c: 7d:e5:be:b7:95:f1:8c:f4:2d:de:ad:87:ef:b5:b4: ba:00:fc:70:82:ca:43:0d:c1:35:57:83:e6:89:6a: 7b:a0:dc:70:b1:0a:18:54:3e:e4:f2:dd:5a:f5:ec: 85:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:2D:36:F4:B2:F4:D3:27:D6:FC:6B:21:01:9A:8A:70:EF:09:5C:50 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ba5981d4-afd6-4470-aa62-ba6b2d148fcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1fff:6000::/40 Signature Algorithm: sha256WithRSAEncryption 09:e8:5b:d4:04:53:c4:40:30:b6:64:7b:d1:59:ea:68:90:6b: 31:b5:70:a8:7f:3d:60:1a:ef:9b:61:c5:2f:89:5a:e2:f9:3e: 73:c9:07:0a:fc:54:9a:c5:78:20:91:15:03:3f:48:1a:6d:1f: 6d:66:ff:98:f6:73:02:4b:9a:32:48:d7:4e:87:fc:d6:06:b0: 27:38:8a:69:68:46:b2:1b:cb:f5:82:2c:40:8f:38:4f:dc:b1: 15:d2:64:16:07:0b:7b:aa:d5:8c:c4:e8:1f:a5:67:ca:85:2f: de:af:93:e6:1b:a5:79:a0:08:b3:2d:c5:fa:fa:f0:26:54:73: a8:12:b0:e3:ac:a3:6d:cf:e4:d8:4f:98:94:36:2b:91:94:6f: 77:e5:0b:06:47:aa:26:1b:e5:e3:fb:17:3f:7d:dc:31:45:89: 12:19:9e:30:b2:f1:98:79:75:bd:b5:e2:87:14:09:9f:46:6a: 3a:3b:73:eb:a9:aa:10:5f:80:12:5b:0c:79:75:21:49:ac:61: 14:32:73:4c:7f:0a:8a:1a:a9:aa:1b:b3:f6:c0:c0:e7:ee:b0: 78:86:b4:8c:9c:4a:c9:ea:4c:b3:c1:2b:cf:07:b5:e7:72:4c: b6:3b:f9:be:7f:78:4c:38:d8:16:6e:87:00:28:d9:16:fc:16: 6f:48:bd:5e -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUYkozmhvhrWrdUvJtKhlYLD8yHz4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNDIyMTU1MDE4WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A1OTFjY2ExNjFlYTRmMDAyYTBiODRiOTFhM2ZiODYyMjgw MTA2MzhlMWRiNjk0NDI5MWI1NDE5ZGNlN2UyZWEyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCLZutrZhDIn26tlMU2DDsT/3LJtf4Mtd0SRmNmF080NN72 fYp2tbB3jqPQ1N10qhaw6cXESMYfXv2g+quuxMBIwWywGWkRmbDPTvTDzqrc3Y1W 2SGkiFkhllz5JprEgqHOUWw4CJ/+3KQM/LYlk3OFL/SA2ts7xi5IH63PUXfyUu8v GBq+1yz1rRBqzC/bTe0ypmKAfV3wd2yyisyNWzIfUR2uBZoKDLENrqceA+s417iu sI2zd8a3KRD1BRZcrXr3ksWu91w8GtCKGyZQt/EffH3lvreV8Yz0Ld6th++1tLoA /HCCykMNwTVXg+aJanug3HCxChhUPuTy3Vr17IULAgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUCy029LL00yfW/GshAZqKcO8JXFAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JhNTk4MWQ0LWFmZDYtNDQ3MC1hYTYyLWJhNmIyZDE0OGZjZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB//YDANBgkqhkiG9w0BAQsFAAOCAQEACehb1ARTxEAwtmR70VnqaJBr MbVwqH89YBrvm2HFL4la4vk+c8kHCvxUmsV4IJEVAz9IGm0fbWb/mPZzAkuaMkjX Tof81gawJziKaWhGshvL9YIsQI84T9yxFdJkFgcLe6rVjMToH6VnyoUv3q+T5hul eaAIsy3F+vrwJlRzqBKw46yjbc/k2E+YlDYrkZRvd+ULBkeqJhvl4/sXP33cMUWJ EhmeMLLxmHl1vbXihxQJn0ZqOjtz66mqEF+AElsMeXUhSaxhFDJzTH8Kihqpqhuz 9sDA5+6weIa0jJxKyepMs8Erzwe153JMtjv5vn94TDjYFm6HACjZFvwWb0i9Xg== -----END CERTIFICATE-----Generated at Sun May 11 17:01:53 2025 by rpki-client